Skip to content
OpenAdvisories
High ALAS2-2021-1715 1 CVE

Important: sssd security update (Amazon Linux 2)

Published Oct 4, 2021 · Updated Oct 6, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3621: A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. 1975142: CVE-2021-3621 sssd: shell command injection in sssctl

Fixed packages 35

ReleasePackageFixed in
Amazon Linux · 2 libipa_hbac 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libipa_hbac-devel 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_autofs 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_certmap 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_certmap-devel 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_idmap 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_idmap-devel 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_nss_idmap 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_nss_idmap-devel 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_simpleifp 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_simpleifp-devel 0:1.16.5-10.amzn2.10
Amazon Linux · 2 libsss_sudo 0:1.16.5-10.amzn2.10
Amazon Linux · 2 python-libipa_hbac 0:1.16.5-10.amzn2.10
Amazon Linux · 2 python-libsss_nss_idmap 0:1.16.5-10.amzn2.10
Amazon Linux · 2 python-sss 0:1.16.5-10.amzn2.10
Amazon Linux · 2 python-sss-murmur 0:1.16.5-10.amzn2.10
Amazon Linux · 2 python-sssdconfig 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-ad 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-client 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-common 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-common-pac 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-dbus 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-debuginfo 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-ipa 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-kcm 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-krb5 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-krb5-common 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-ldap 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-libwbclient 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-libwbclient-devel 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-polkit-rules 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-proxy 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-tools 0:1.16.5-10.amzn2.10
Amazon Linux · 2 sssd-winbind-idmap 0:1.16.5-10.amzn2.10

Vulnerabilities 1

  • Unscored —
    CVE-2021-3621

    A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cac…

    sssd sssd Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3621.html